Privacy & Biometric Data (PDPA)

What we collect

Account details (name, phone, email), your vehicle license plate(s), booking and payment records, gate access events, and — only if you opt in — a facial biometric template for contactless gate entry.

How the face template works

We never store photos. Enrollment runs entirely in your browser: a 3-pose liveness scan produces a 128-number mathematical descriptor. Only that descriptor is stored, in a table readable solely by the gate-matching service — not by our web app, not by your own logged-in session, and not by anyone holding a public API key.

Your rights under PDPA

• Consent is explicit and opt-in; gate access also works by license plate or QR.
• You can delete your biometric template anytime from the Account page (“Delete my biometric data”) — matching stops immediately.
• Gate access logs are automatically purged after 90 days.
• Request access to or deletion of your other data by contacting the operator.

Payments

PromptPay transfers are made directly to the operator's account; we store the reference, amount, and (if you upload one) your transfer slip for reconciliation.